Juplink Rx4-1500 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Juplink Rx4-1500 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-41028 — CVSS 9.0 (critical): A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can…
• CVE-2023-41027 — CVSS 8.0 (high): Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an…
• CVE-2023-41029 — CVSS 8.0 (high): Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and…
• CVE-2023-41031 — CVSS 8.0 (high): Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to…
• CVE-2020-8797 — CVSS 6.7 (medium): Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line…
• CVE-2023-41030 — CVSS 6.3 (medium): Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or…
• CVE-2020-8798 — CVSS 5.5 (medium): httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated…